| 제목 | itsourcecode Online Medicine Delivery System v1.0 SQL Injection |
|---|
| 설명 | 1.Description
The product category filter interface /index.php?q=product&category= of Online Medicine Delivery System contains an SQL injection vulnerability. The interface receives the user-submitted category parameter and directly concatenates it into the SQL query's WHERE CATEGORIES='{$_GET['category']}' condition without any filtering or escaping. Since the query results are rendered directly to the product listing page via loadResultList(), an attacker can use UNION injection to echo arbitrary data onto the page.
2.Impact
(1) Full Database Data Disclosure: Through UNION injection, arbitrary data from any database and any table can be directly echoed onto the product listing page, including user password hashes, customer personal information, order data, etc.
(2) No Authentication Required: This interface is a frontend product category filter feature, accessible and exploitable without any login
(3) Multiple Injection Methods: Supports 4 injection types (Boolean-based blind, Error-based, Time-based blind, UNION query injection), representing a very broad attack surface
3. Remediation
(1) Use Parameterized Queries
(2) Input Validation: The category parameter should be a valid category name; use whitelist validation (matching against existing categories in the database) |
|---|
| 원천 | ⚠️ https://github.com/boyslikesports/202607_vul_dir/blob/main/C-05-SQLi-Product-Category_en.md |
|---|
| 사용자 | Weining Xiao (UID 88216) |
|---|
| 제출 | 2026. 07. 16. PM 02:21 (1 월 ago) |
|---|
| 모더레이션 | 2026. 08. 30. AM 09:44 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 397115 [itsourcecode Online Medicine Delivery System 1.0 Product Category Filter Interface /index.php?q=product loadResultList 범주 SQL 주입] |
|---|
| 포인트들 | 20 |
|---|